CVE-2026-76413Disclosure

LOWCVSS 8.2 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could exploit this vulnerability by performing session token forgery techniques. A successful exploit could allow the attacker to log in as the administrator user and, by repeating this action, keep legitimate administrators locked out of the ASDM indefinitely.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-1259

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-09-16: 3Technical Details · 2026-09-16: 209-16
Signal classification1 categories
Disclosure
3100.0%
Referenced assets1 URL
By indicator
Full discourse3 posts
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-76413 A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Soft… CVSS 8.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-76413 #Cisco #CyberSecurity #InfoSec

    Post summary

    The tweet discloses CVE-2026-76413 in Cisco ASDM SSO handler with a CVSS score of 8.2 and links to a full analysis.

    0000042
    90 followersView on X
  • Francis Rancid@FrancisRancid
    Disclosure

    CVE-2026-76413: Cisco Secure FMC Single Sign-On Token Forgery Account Vulnerability A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user.

    Post summary

    CVE-2026-76413 is disclosed as a token forgery vulnerability in Cisco Secure FMC ASDM SSO that could allow unauthenticated remote admin login, but no PoC, exploit, patch, or active exploitation details are included.

    0000044
    7 followersView on X
  • Francis Rancid@FrancisRancid
    Disclosure

    Ya boy CVE-2026-76412 CVE-2026-76413 CVE-2026-76420 https://t.co/wE90SUm7tt

    Post summary

    The tweet announces three CVE identifiers (dated 2026) and shares a shortened link without providing technical details, exploitation status, or remediation guidance, consistent with a vulnerability disclosure notification.

    0000037
    7 followersView on X

Explore more